Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3134302e302f32332d3234203d3e203138383232.roa
File:                     3139302e3139362e3134302e302f32332d3234203d3e203138383232.roa (raw, json)
Hash identifier:          JH0Iv759+tkRKWtt3AHB2HsLTwKZ6z3ntbbhh/6muS8=
Subject key identifier:   A5:5B:FC:C8:75:48:1A:06:46:60:F1:84:EF:22:2C:DF:39:CA:F7:EB
Certificate issuer:       /CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
Certificate serial:       28458A62890117858D99FBCAFF3B53A642A59474
Authority key identifier: 46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3134302e302f32332d3234203d3e203138383232.roa
Signing time:             Tue 01 Jul 2025 16:55:11 +0000
ROA not before:           Tue 01 Jul 2025 16:50:11 +0000
ROA not after:            Tue 30 Jun 2026 16:55:11 +0000
asID:                     18822
IP address blocks:        190.196.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:45:8a:62:89:01:17:85:8d:99:fb:ca:ff:3b:53:a6:42:a5:94:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46191221E2C9A2D8AE8D6B351C4A00D59C966C85
        Validity
            Not Before: Jul  1 16:50:11 2025 GMT
            Not After : Jun 30 16:55:11 2026 GMT
        Subject: CN=A55BFCC875481A064660F184EF222CDF39CAF7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:22:39:d3:f9:05:ed:82:12:87:64:f2:4d:
                    d8:0a:6e:09:73:a1:7a:07:a8:be:d8:ad:65:23:22:
                    7a:c9:c8:40:27:a8:9e:dd:95:68:fe:d1:eb:ac:30:
                    88:3a:fa:73:c9:08:ed:87:a3:c5:be:b8:54:c9:05:
                    ed:6c:ef:8b:00:ef:bd:3d:e9:60:85:6d:35:d3:53:
                    fc:45:aa:e5:63:c2:66:f1:d9:c6:5d:78:81:5f:98:
                    a6:79:0c:df:7c:05:25:e6:4c:82:52:12:96:37:f9:
                    d4:0a:26:05:fd:ae:82:15:9a:41:6e:01:76:97:bc:
                    fe:38:94:6b:a4:d6:b4:ca:f3:e3:47:71:96:3f:b1:
                    e8:34:8f:d7:29:98:b7:70:ff:7b:c8:eb:d5:06:3e:
                    2b:ff:60:ea:ae:95:02:da:07:2a:70:72:1d:f9:53:
                    8b:47:e1:75:e9:be:0c:b4:03:25:85:aa:cf:99:a1:
                    16:d2:7d:ff:ce:f3:b7:c5:6e:42:fa:fd:f5:35:1e:
                    60:1e:f2:74:a8:0a:ef:3a:cf:04:c8:44:76:bb:ab:
                    84:45:90:59:0c:71:d2:8e:79:c5:64:ca:62:60:d5:
                    6e:ee:82:d5:09:10:7b:cb:23:16:32:64:6f:fc:aa:
                    3b:53:48:45:14:fa:cb:30:83:0b:8d:29:63:e9:85:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5B:FC:C8:75:48:1A:06:46:60:F1:84:EF:22:2C:DF:39:CA:F7:EB
            X509v3 Authority Key Identifier:
                keyid:46:19:12:21:E2:C9:A2:D8:AE:8D:6B:35:1C:4A:00:D5:9C:96:6C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46191221E2C9A2D8AE8D6B351C4A00D59C966C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C183EF2D111D64B6DDEE47C2BE674E71B560DB874E976AE9C456D471A8CB7AE/0/3139302e3139362e3134302e302f32332d3234203d3e203138383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:46:78:31:50:7f:88:ed:0b:11:f4:c6:f2:13:00:60:4f:9c:
         e5:02:5d:77:bd:d4:2e:09:3e:cb:f1:82:66:e0:0e:0e:97:9b:
         90:25:39:50:27:51:a6:f7:af:30:82:c3:4a:a3:5d:a3:c6:c5:
         17:83:bc:b1:a1:87:09:70:24:aa:2e:56:7d:e9:8b:e1:ca:0f:
         9e:f2:d0:8c:b1:5d:25:68:c7:dc:04:53:39:ee:08:ad:a3:6d:
         78:cf:69:dc:8c:78:d7:f6:85:16:4c:2e:7a:a4:c3:5b:dd:cc:
         64:da:1a:b2:88:2f:7a:da:1e:16:2f:1b:86:71:a5:c3:5d:60:
         6b:79:65:2d:6a:17:b6:fb:64:6c:d1:5e:4f:e8:0b:2a:ad:58:
         d2:6a:87:36:e5:d5:88:66:90:c2:cf:8a:95:89:d3:6d:8a:7a:
         45:24:d2:af:fe:50:a0:5a:cb:c4:97:53:45:5e:3b:8a:37:a8:
         29:b6:c2:82:a7:0c:46:f0:e0:a9:7d:de:c5:30:2a:2e:2a:21:
         b7:d0:8d:3c:d3:c0:63:c3:ed:1f:75:72:65:3d:d8:d1:a9:0f:
         95:b8:43:17:1c:36:e6:b0:2b:04:fc:b8:25:52:4b:97:61:95:
         61:2f:40:10:d7:64:0c:23:d5:98:36:32:c9:13:bc:54:6b:92:
         94:6b:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:46:13 2025 by rpki-client